This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json)
Hash identifier: qkHScTqJgGKCOgA8R8F61uazxUS4TjbnUFx3QLPkVX8=
Subject key identifier: 13:AF:62:17:A8:84:38:01:D0:40:8F:3D:08:77:B3:7C:70:3D:E1:94
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 35C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
Manifest number: 3563
Signing time: Thu 05 Feb 2026 01:11:19 +0000
Manifest this update: Thu 05 Feb 2026 01:11:19 +0000
Manifest next update: Thu 12 Feb 2026 01:11:19 +0000
Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: GNORsjtYg4iLKcVKgCISiHCizuk6wZJD3ZmJchUIANA=)
2: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: ZqgeyChgSkuAuEy8E4XBqCcFOmGTEjV9SXx7odN3pv4=)
3: D1EE6884F06C11EEA5BAA656C4F9AE02.roa (hash: 8K4hb6GJHcWswysfKKK+VFXlsdhKy8EjS5fIz+8731Q=)
4: DDF4B0D2F08C11EEB70A1F76C4F9AE02.roa (hash: 3IhKk2ns73ug1cPcItokkvNYGQWI9rs7b4nF6YtsTSc=)
5: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 1mDu3Q1bdiSa3axtc15ZDTGlc4zW4OxSySLPwHbTbvE=)
6: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: vltJ7Buw53igWVIfCgs9blss6VeKEkgF9l7xhGZDnwo=)
7: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: oj9MA2Xl79Ulu/1U7XExVD59vw2GZhJkFrHTogIDTCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 01:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13768 (0x35c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Validity
Not Before: Feb 5 01:11:19 2026 GMT
Not After : Feb 12 01:11:19 2026 GMT
Subject: CN=6983ee37-23db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:ef:c2:dd:a2:59:f2:21:2d:df:c2:a7:73:
4a:e7:93:38:0e:14:89:e6:b6:23:5e:4a:cc:73:6d:
fe:c7:5c:7c:ab:7a:68:15:88:8e:5c:07:0b:c7:bf:
c8:40:06:81:50:3c:4a:a0:f9:1a:04:62:66:fc:ef:
b5:f8:24:f3:a7:f5:d1:fb:c8:a8:c2:91:fc:b4:16:
8f:89:3c:e0:6b:a2:47:c0:be:87:37:87:11:8d:c4:
0e:89:74:be:9b:85:d5:ea:d8:60:d9:5f:32:6c:67:
1c:9f:37:ca:ab:e6:d1:4d:76:bb:d3:f7:ff:aa:df:
a6:4e:b3:2c:a8:39:c2:45:3b:27:a1:69:7f:ef:d4:
6d:bc:54:f5:76:d1:a2:76:b7:54:b8:6c:03:c3:1f:
da:38:ee:16:e3:7e:23:62:b6:ec:84:14:cb:93:54:
03:1e:f7:30:79:86:bf:51:95:3c:ca:c1:85:b2:9a:
5e:95:ed:a8:b5:d6:9f:4b:1b:7f:db:cd:4f:3f:d3:
0e:84:64:df:b0:d9:84:8c:1b:a5:b3:7b:c3:68:95:
f2:0a:62:ad:9e:5d:76:54:3d:46:3f:67:05:c2:f6:
b3:c0:e6:d6:88:a0:0c:1d:d0:71:39:98:c9:c0:4a:
a0:33:28:47:4d:20:47:0f:bd:20:12:92:15:a8:51:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AF:62:17:A8:84:38:01:D0:40:8F:3D:08:77:B3:7C:70:3D:E1:94
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:9e:1b:33:c7:7c:dc:3e:36:d8:ff:6e:c3:53:68:b9:26:23:
f1:82:df:50:29:ca:e0:a9:1e:b1:59:25:29:e0:5d:fd:e8:9d:
a8:10:c5:2e:5c:5a:31:c0:eb:a7:e6:72:db:00:6d:64:ce:f4:
ea:68:45:73:61:84:16:07:1f:59:d2:19:bf:a5:b2:3e:07:3c:
59:16:46:1b:f0:a9:fe:25:ce:8b:79:79:c3:b6:18:bb:ae:ad:
0c:63:3b:d7:e3:7f:0e:78:5a:3b:5e:9f:eb:90:d1:91:b5:60:
c0:63:f2:fa:d8:6c:d5:08:91:6e:08:7d:fb:17:0d:e3:4f:e1:
91:84:a3:4a:b6:8c:a9:d5:12:6a:b4:e2:23:6e:ba:f0:b5:58:
6c:f2:21:53:4f:c0:5e:ee:cc:86:c4:c9:c5:a4:6a:5a:2d:22:
61:eb:a8:54:78:9d:da:01:9a:e6:a4:d5:e3:88:70:14:ac:41:
05:6e:3a:f1:36:33:8d:2e:44:59:2a:03:7a:0f:24:90:34:b5:
1a:2b:2e:f5:91:01:6a:65:e0:46:95:84:eb:ff:1f:04:cd:55:
d4:80:da:17:94:05:c6:de:82:5f:2a:6f:d1:75:ae:eb:98:b3:
af:50:1b:8c:06:60:3a:c9:80:12:e3:68:35:96:d8:05:f9:35:
da:33:45:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE
RjgzOTZFQkUwHhcNMjYwMjA1MDExMTE5WhcNMjYwMjEyMDExMTE5WjAYMRYwFAYD
VQQDDA02OTgzZWUzNy0yM2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Ynvwt2iWfIhLd/Cp3NK55M4DhSJ5rYjXkrMc23+x1x8q3poFYiOXAcLx7/I
QAaBUDxKoPkaBGJm/O+1+CTzp/XR+8iowpH8tBaPiTzga6JHwL6HN4cRjcQOiXS+
m4XV6thg2V8ybGccnzfKq+bRTXa70/f/qt+mTrMsqDnCRTsnoWl/79RtvFT1dtGi
drdUuGwDwx/aOO4W434jYrbshBTLk1QDHvcweYa/UZU8ysGFsppele2otdafSxt/
281PP9MOhGTfsNmEjBuls3vDaJXyCmKtnl12VD1GP2cFwvazwObWiKAMHdBxOZjJ
wEqgMyhHTSBHD70gEpIVqFG1cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOvYheo
hDgB0ECPPQh3s3xwPeGUMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE
OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi
cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTk3OC8zMjIzRjM1RTFEOTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMy
bVZJc2s5Sm5jX0RmZzVicjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUnhszx3zcPjbY/27DU2i5JiPxgt9QKcrgqR6xWSUp4F396J2oEMUu
XFoxwOun5nLbAG1kzvTqaEVzYYQWBx9Z0hm/pbI+BzxZFkYb8Kn+Jc6LeXnDthi7
rq0MYzvX438OeFo7Xp/rkNGRtWDAY/L62GzVCJFuCH37Fw3jT+GRhKNKtoyp1RJq
tOIjbrrwtVhs8iFTT8Be7syGxMnFpGpaLSJh66hUeJ3aAZrmpNXjiHAUrEEFbjrx
NjONLkRZKgN6DySQNLUaKy71kQFqZeBGlYTr/x8EzVXUgNoXlAXG3oJfKm/Rda7r
mLOvUBuMBmA6yYAS42g1ltgF+TXaM0X0
-----END CERTIFICATE-----
Generated at Thu Feb 5 11:00:01 2026 by rpki-client